General
- Target 84dbcb87a7b0f0348d27a4afd17670efb0172c16c3a04662c0221c60e75cf67d.bin
- Size 207KB
- Sample260906-bneycswckg
- SHA256 84dbcb87a7b0f0348d27a4afd17670efb0172c16c3a04662c0221c60e75cf67d
- MD5 ff3f9ded16af4a0e73a0ab15780add3e
- SHA1 7834693e5fe6f006f2db44626847f8d314d86d35
- SHA512 0f7f1a7bf3cdb05a2422c91312c611896522b0c4d1ab862408bc2a577589bc32605acf0a5525befaa2091fbf655dced0a2578ff31e67f40d740558633a771f4d
- SSDEEP 6144:XDKW1Lgbdl0TBBvjc/xSrovAXTe7mR11HlcM9:Th1Lk70TnvjcpS0AXTeGnHlF9
- TLSH T15624BE1074C1C1B3C4BB113545E6CB7A9A3A7071077A96D7B6DC27BAAE113E1A3362CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
84dbcb87a7b0f0348d27a4afd17670efb0172c16c3a04662c0221c60e75cf67d.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
84dbcb87a7b0f0348d27a4afd17670efb0172c16c3a04662c0221c60e75cf67d.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
2
C2
-
denverbbq.net:80
Targets
-
- Target 84dbcb87a7b0f0348d27a4afd17670efb0172c16c3a04662c0221c60e75cf67d.bin
- Size 207KB
- SHA256 84dbcb87a7b0f0348d27a4afd17670efb0172c16c3a04662c0221c60e75cf67d
- MD5 ff3f9ded16af4a0e73a0ab15780add3e
- SHA1 7834693e5fe6f006f2db44626847f8d314d86d35
- SHA512 0f7f1a7bf3cdb05a2422c91312c611896522b0c4d1ab862408bc2a577589bc32605acf0a5525befaa2091fbf655dced0a2578ff31e67f40d740558633a771f4d
- SSDEEP 6144:XDKW1Lgbdl0TBBvjc/xSrovAXTe7mR11HlcM9:Th1Lk70TnvjcpS0AXTeGnHlF9
- TLSH T15624BE1074C1C1B3C4BB113545E6CB7A9A3A7071077A96D7B6DC27BAAE113E1A3362CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload